Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3130332e3131372e33312e302f32342d3234203d3e2039333431.roa
File: 3130332e3131372e33312e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier: G8V9bYOLUOIypVSHcIPrgl6EW/KWq8T7yHx4EtRZ1is=
Subject key identifier: D8:2F:3F:53:5C:B2:51:9A:C2:E4:7C:93:3D:3B:0D:D6:C8:35:3C:1A
Certificate issuer: /CN=3E69DE558C030D2041570E32C387F764C38BBBA9
Certificate serial: 2AA85D9EF98DCA8FF04F006BEB25863128ED3583
Authority key identifier: 3E:69:DE:55:8C:03:0D:20:41:57:0E:32:C3:87:F7:64:C3:8B:BB:A9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E69DE558C030D2041570E32C387F764C38BBBA9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3130332e3131372e33312e302f32342d3234203d3e2039333431.roa
Signing time: Tue 28 Apr 2026 07:02:02 +0000
ROA not before: Tue 28 Apr 2026 06:57:02 +0000
ROA not after: Tue 27 Apr 2027 07:02:02 +0000
asID: 9341
IP address blocks: 103.117.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:a8:5d:9e:f9:8d:ca:8f:f0:4f:00:6b:eb:25:86:31:28:ed:35:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E69DE558C030D2041570E32C387F764C38BBBA9
Validity
Not Before: Apr 28 06:57:02 2026 GMT
Not After : Apr 27 07:02:02 2027 GMT
Subject: CN=D82F3F535CB2519AC2E47C933D3B0DD6C8353C1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:72:99:15:97:f6:e4:2c:85:ce:e5:df:37:91:
24:1d:ff:81:23:72:f6:ae:32:a6:72:6c:59:38:b1:
0e:d7:21:0f:ea:e7:d7:02:e1:05:2f:50:90:96:ac:
90:09:24:6d:65:e8:70:89:8d:57:6e:6f:44:50:a8:
3e:a7:d0:61:85:fb:6c:ab:21:6e:37:7c:13:16:1a:
ec:6e:69:d3:56:c0:38:54:14:15:dc:54:f1:c9:65:
47:80:65:51:d3:9e:3c:27:4a:cb:0f:e7:bd:af:fa:
9e:d2:83:9e:c1:1c:94:6b:9e:ec:e6:ba:e7:85:fc:
4b:97:28:bc:10:03:47:61:4f:65:1a:0f:22:c6:32:
b4:97:0f:35:ae:98:e4:21:83:de:43:8a:4c:aa:d1:
24:cd:78:13:28:05:40:74:92:3f:07:47:ea:11:6a:
1c:58:5c:75:18:88:fc:aa:8f:1d:a9:29:d9:00:82:
b5:48:b9:64:ac:79:84:39:8e:2f:85:7b:43:b4:5c:
aa:db:ee:d1:9d:5b:14:51:20:79:c0:8e:3e:c8:71:
dc:e6:55:bc:9f:26:56:7d:dc:7b:8c:c7:72:3c:08:
2a:44:ee:06:69:1f:7c:9c:f9:6c:be:59:19:13:ad:
9f:12:6f:de:7d:f9:bd:2b:98:e3:b3:84:56:05:c4:
d8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:2F:3F:53:5C:B2:51:9A:C2:E4:7C:93:3D:3B:0D:D6:C8:35:3C:1A
X509v3 Authority Key Identifier:
keyid:3E:69:DE:55:8C:03:0D:20:41:57:0E:32:C3:87:F7:64:C3:8B:BB:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E69DE558C030D2041570E32C387F764C38BBBA9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3130332e3131372e33312e302f32342d3234203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.117.31.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:0f:c4:70:e0:38:71:f9:c6:91:d6:d4:a5:cf:2e:ac:8b:3a:
10:e0:39:d0:21:c8:ac:8f:d3:eb:3f:0f:1a:ba:0c:dd:20:19:
60:b3:be:2a:66:be:7f:bf:97:48:05:47:21:21:d3:5a:d8:20:
82:7c:03:84:2c:8d:95:08:b9:28:a9:fe:92:fc:6e:92:59:10:
27:e2:6e:81:1c:eb:32:69:70:2b:db:f8:05:a4:13:5f:47:6c:
56:fb:1f:d5:4a:37:6b:60:ce:b2:61:b6:3e:b7:81:e2:7b:94:
5f:80:f3:44:cd:45:bd:32:58:31:a0:33:22:a2:68:a4:f4:5c:
59:d7:32:36:15:c8:45:7c:40:bb:64:af:6d:ce:09:05:4a:22:
32:f4:49:fe:b2:81:12:30:29:26:33:1e:47:6f:7e:bf:b2:4c:
af:dc:a4:76:b8:7f:3e:3e:54:a5:7d:71:58:1e:df:7f:59:c8:
8a:a9:96:3f:b6:6b:28:f5:60:a1:5c:8f:4b:93:5c:67:9a:f3:
60:1f:ea:8a:ff:70:08:53:d4:7f:26:e0:8e:0d:30:7f:87:b8:
b5:04:44:ed:4b:04:a6:bb:a5:cd:60:9b:3b:d9:d6:a6:27:d5:
0e:32:2a:8c:66:96:64:49:d9:6f:66:8d:d7:0e:8a:7c:f3:c4:
4b:34:cd:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:33:42 2026 by rpki-client